Thank you, John!
But when I've tried to execute "./rft -z
"/O=Grid/OU=GlobusTest/OU=simpleCA-test2.igroup/CN=host/test2.igroup" -f
/home/ssedai/GlobusToolkit/share/globus_wsrf_rft_test/transfer.xfr" command
and I've
got this error:
ERROR providers.AbstractEngine [ServiceThread-3,initializeInterceptors:245]
[JWSSEC-165] Error loading interceptor: "Interceptor: selfAuthz:self"
java.lang.ClassNotFoundException: self
at java.net.URLClassLoader$1.run(URLClassLoader.java:200)
at java.security.AccessController.doPrivileged(Native Method)
at java.net.URLClassLoader.findClass(URLClassLoader.java:188)
at java.lang.ClassLoader.loadClass(ClassLoader.java:307)
at java.lang.ClassLoader.loadClass(ClassLoader.java:252)
at java.lang.ClassLoader.loadClassInternal(ClassLoader.java:320)
at java.lang.Class.forName0(Native Method)
at java.lang.Class.forName(Class.java:247)
at
org.globus.security.authorization.providers.AbstractEngine.loadClass(AbstractEngine.java:299)
at
org.globus.security.authorization.providers.AbstractEngine.initializeInterceptors(AbstractEngine.java:233)
at
org.globus.security.authorization.providers.AbstractEngine.initializeInterceptors(AbstractEngine.java:182)
at
org.globus.security.authorization.providers.AbstractEngine.engineInitialize(AbstractEngine.java:110)
at
org.globus.security.authorization.providers.PermitOverrideAlg.engineInitialize(PermitOverrideAlg.java:56)
at
org.globus.wsrf.impl.security.authorization.AuthorizationEngine.initialize(AuthorizationEngine.java:111)
at
org.globus.wsrf.impl.security.util.AuthzUtil.getAuthzEngine(AuthzUtil.java:146)
at
org.globus.wsrf.impl.security.util.AuthzUtil.getAuthzEngine(AuthzUtil.java:130)
at
org.globus.wsrf.impl.security.authorization.AuthorizationHandler.getDefaultAuthzEngine(AuthorizationHandler.java:327)
at
org.globus.wsrf.impl.security.authorization.AuthorizationHandler.invoke(AuthorizationHandler.java:226)
at
org.apache.axis.strategies.InvocationStrategy.visit(InvocationStrategy.java:32)
at org.apache.axis.SimpleChain.doVisiting(SimpleChain.java:118)
at org.apache.axis.SimpleChain.invoke(SimpleChain.java:83)
at org.apache.axis.server.AxisServer.invokeService(AxisServer.java:199)
at org.apache.axis.server.AxisServer.invoke(AxisServer.java:375)
at org.globus.wsrf.container.ServiceThread.doPost(ServiceThread.java:949)
at org.globus.wsrf.container.ServiceThread.process(ServiceThread.java:684)
at
org.globus.wsrf.container.GSIServiceThread.process(GSIServiceThread.java:182)
at org.globus.wsrf.container.ServiceThread.run(ServiceThread.java:471)
2009-05-20 14:36:19,235 ERROR authorization.AuthorizationHandler
[ServiceThread-3,invoke:232] guid=0d3406f0-452a-11de-9fbc-d88add76d387
event=org.globus.authz.end status=-1 msg="[JWSSEC-116] Authorization failed.
reason= [Caused by: [JWSSEC-165] Error loading interceptor: "Interceptor:
selfAuthz:self"]"
DN="/O=Grid/OU=GlobusTest/OU=simpleCA-test2.igroup/CN=host/test2.igroup"
service=NotificationConsumerService operation={
http://wsrf.globus.org/core/notification}notify
At this time parallely Globus container returns such text blocks:
Authentication with credential only failed on server localhost. Caused by
Authentication failed. Caused by GSSException: Operation unauthorized
(Mechanism level: [JGLOBUS-56] Authorization failed. Expected
"/CN=host/localhost" target but received
"/O=Grid/OU=GlobusTest/OU=simpleCA-test2.igroup/OU=igroup/CN=Smolov Sergey")
at
org.globus.gsi.gssapi.GlobusGSSContextImpl.initSecContext(GlobusGSSContextImpl.java:520)
at
org.globus.ftp.extended.GridFTPControlChannel.authenticate(GridFTPControlChannel.java:209)
at org.globus.ftp.GridFTPClient.authenticate(GridFTPClient.java:107)
at org.globus.ftp.GridFTPClient.authenticate(GridFTPClient.java:92)
at
org.globus.transfer.reliable.service.cache.SingleConnectionImpl.<init>(SingleConnectionImpl.java:101)
at
org.globus.transfer.reliable.service.cache.ThirdPartyConnectionImpl.<init>(ThirdPartyConnectionImpl.java:49)
at
org.globus.transfer.reliable.service.cache.ConnectionManager.createNewConnection(ConnectionManager.java:340)
at
org.globus.transfer.reliable.service.cache.ConnectionManager.getConnection(ConnectionManager.java:191)
at
org.globus.transfer.reliable.service.client.ThirdPartyTransferClient.<init>(ThirdPartyTransferClient.java:67)
at
org.globus.transfer.reliable.service.client.ClientFactory.createThirdPartyTransferClient(ClientFactory.java:177)
at
org.globus.transfer.reliable.service.TransferWork.run(TransferWork.java:355)
at EDU.oswego.cs.dl.util.concurrent.PooledExecutor$Worker.run(Unknown
Source)
at java.lang.Thread.run(Thread.java:619)
2009-05-20T14:36:17.675+04:00 ERROR service.TransferWork
[Thread-28,oldLog:175] Transient transfer error
Authentication with credential only failed on server localhost [Caused by:
Authentication failed [Caused by: Operation unauthorized (Mechanism level:
[JGLOBUS-56] Authorization failed. Expected "/CN=host/localhost" target but
received "/O=Grid/OU=GlobusTest/OU=simpleCA-test2.igroup/OU=igroup/CN=Smolov
Sergey")]]
I also have tried to run test for RFT, which are placed on
$GLOBUS_LOCATION/share/wsrf_rft_test.
I had such result:
ant -Dtests.jar=$GLOBUS_LOCATION/lib/globus_wsrf_rft_test.jar -f
$GLOBUS_LOCATION/share/globus_wsrf_rft_test/runtests.xml
Buildfile:
/home/ssedai/GlobusToolkit/share/globus_wsrf_rft_test/runtests.xml
init:
[delete] Deleting directory
/home/ssedai/GlobusToolkit/share/globus_wsrf_rft_test/tests/classes
[mkdir] Created dir:
/home/ssedai/GlobusToolkit/share/globus_wsrf_rft_test/tests/classes
[unjar] Expanding: /home/ssedai/GlobusToolkit/lib/globus_wsrf_rft_test.jar
into /home/ssedai/GlobusToolkit/share/globus_wsrf_rft_test/tests/classes
runServer:
runTests:
_runCustomTests:
[junit] Running org.globus.transfer.reliable.service.test.PackageTests
[junit] org.globus.gsi.gssapi.auth.AuthorizationException: Mutual
authentication failed
[junit] Expected target subject name="/CN=host/localhost"
[junit] Target returned subject
name="/O=Grid/OU=GlobusTest/OU=simpleCA-test2.igroup/CN=host/test2.igroup"])
[junit] org.globus.gsi.gssapi.auth.AuthorizationException: Mutual
authentication failed
[junit] Expected target subject name="/CN=host/localhost"
[junit] Target returned subject
name="/O=Grid/OU=GlobusTest/OU=simpleCA-test2.igroup/CN=host/test2.igroup"])
[junit] org.globus.gsi.gssapi.auth.AuthorizationException: Mutual
authentication failed
[junit] Expected target subject name="/CN=host/localhost"
[junit] Target returned subject
name="/O=Grid/OU=GlobusTest/OU=simpleCA-test2.igroup/CN=host/test2.igroup"])
[junit] org.globus.gsi.gssapi.auth.AuthorizationException: Mutual
authentication failed
[junit] Expected target subject name="/CN=host/localhost"
[junit] Target returned subject
name="/O=Grid/OU=GlobusTest/OU=simpleCA-test2.igroup/CN=host/test2.igroup"])
[junit] org.globus.gsi.gssapi.auth.AuthorizationException: Mutual
authentication failed
[junit] Expected target subject name="/CN=host/localhost"
[junit] Target returned subject
name="/O=Grid/OU=GlobusTest/OU=simpleCA-test2.igroup/CN=host/test2.igroup"])
[junit] org.globus.gsi.gssapi.auth.AuthorizationException: Mutual
authentication failed
[junit] Expected target subject name="/CN=host/localhost"
[junit] Target returned subject
name="/O=Grid/OU=GlobusTest/OU=simpleCA-test2.igroup/CN=host/test2.igroup"])
[junit] org.globus.gsi.gssapi.auth.AuthorizationException: Mutual
authentication failed
[junit] Expected target subject name="/CN=host/localhost"
[junit] Target returned subject
name="/O=Grid/OU=GlobusTest/OU=simpleCA-test2.igroup/CN=host/test2.igroup"])
[junit] org.globus.gsi.gssapi.auth.AuthorizationException: Mutual
authentication failed
[junit] Expected target subject name="/CN=host/localhost"
[junit] Target returned subject
name="/O=Grid/OU=GlobusTest/OU=simpleCA-test2.igroup/CN=host/test2.igroup"])
[junit] org.globus.gsi.gssapi.auth.AuthorizationException: Mutual
authentication failed
[junit] Expected target subject name="/CN=host/localhost"
[junit] Target returned subject
name="/O=Grid/OU=GlobusTest/OU=simpleCA-test2.igroup/CN=host/test2.igroup"])
[junit] org.globus.gsi.gssapi.auth.AuthorizationException: Mutual
authentication failed
[junit] Expected target subject name="/CN=host/localhost"
[junit] Target returned subject
name="/O=Grid/OU=GlobusTest/OU=simpleCA-test2.igroup/CN=host/test2.igroup"])
[junit] org.globus.gsi.gssapi.auth.AuthorizationException: Mutual
authentication failed
[junit] Expected target subject name="/CN=host/localhost"
[junit] Target returned subject
name="/O=Grid/OU=GlobusTest/OU=simpleCA-test2.igroup/CN=host/test2.igroup"])
[junit] org.globus.gsi.gssapi.auth.AuthorizationException: Mutual
authentication failed
[junit] Expected target subject name="/CN=host/localhost"
[junit] Target returned subject
name="/O=Grid/OU=GlobusTest/OU=simpleCA-test2.igroup/CN=host/test2.igroup"])
[junit] org.globus.gsi.gssapi.auth.AuthorizationException: Mutual
authentication failed
[junit] Expected target subject name="/CN=host/localhost"
[junit] Target returned subject
name="/O=Grid/OU=GlobusTest/OU=simpleCA-test2.igroup/CN=host/test2.igroup"])
[junit] org.globus.gsi.gssapi.auth.AuthorizationException: Mutual
authentication failed
[junit] Expected target subject name="/CN=host/localhost"
[junit] Target returned subject
name="/O=Grid/OU=GlobusTest/OU=simpleCA-test2.igroup/CN=host/test2.igroup"])
[junit] org.globus.gsi.gssapi.auth.AuthorizationException: Mutual
authentication failed
[junit] Expected target subject name="/CN=host/localhost"
[junit] Target returned subject
name="/O=Grid/OU=GlobusTest/OU=simpleCA-test2.igroup/CN=host/test2.igroup"])
[junit] org.globus.gsi.gssapi.auth.AuthorizationException: Mutual
authentication failed
[junit] Expected target subject name="/CN=host/localhost"
[junit] Target returned subject
name="/O=Grid/OU=GlobusTest/OU=simpleCA-test2.igroup/CN=host/test2.igroup"])
[junit] org.globus.gsi.gssapi.auth.AuthorizationException: Mutual
authentication failed
[junit] Expected target subject name="/CN=host/localhost"
[junit] Target returned subject
name="/O=Grid/OU=GlobusTest/OU=simpleCA-test2.igroup/CN=host/test2.igroup"])
[junit] Tests run: 17, Failures: 0, Errors: 17, Time elapsed: 50,606 sec
[junit] Test org.globus.transfer.reliable.service.test.PackageTests FAILED
[junit] Running
org.globus.transfer.reliable.service.test.client.PackageTests
[junit] Tests run: 8, Failures: 0, Errors: 3, Time elapsed: 1,469 sec
[junit] Test org.globus.transfer.reliable.service.test.client.PackageTests
FAILED
[junit] Running
org.globus.transfer.reliable.service.test.connection.PackageTests
[junit] Tests run: 55, Failures: 12, Errors: 27, Time elapsed: 3,754 sec
[junit] Test
org.globus.transfer.reliable.service.test.connection.PackageTests FAILED
BUILD SUCCESSFUL
Total time: 1 minute 0 seconds
Here is my test.properties file:
PROTOCOL=https
HOST=127.0.0.1
PORT=8443
authType=GSI_TRANSPORT
authzVal=host
sourceHost=test2.iGroup
destinationHost=test2.iGroup
sourcePort=2811
destinationPort=2811
sourcePath=/etc/group
destPath=/tmp/rftTest_Done.tmp
sourceSubject=
subject=
destinationSubject=
binary=
tcpBufferSize=
blockSize=
noTpt=
parallelStreams=
dcau=
concurrency=1
allOrNone=false
maxAttempts=10
backwardsCompatible=true
Could somebody explain this?
Great thanks in advance
2009/5/19, John Bresnahan <bresn...@mcs.anl.gov>:
>
>
>
> try adding -z "O=Grid/OU/CN=host/test2.igroup" to the rft client
>
> Sergei Smolov wrote:
>
>> Hello, List!
>> I am using GT4 and I want to use RFT. I've installed GT4, then I've
>> strated
>> globus-gridftp-server and container, and I've tried to start rft command
>> line tool, as it is described in
>> m
>>
>> But I get this error instead:
>> ERROR delegation.DelegationUtil [main,getCertificateChainRP:615]
>> org.globus.gsi.gssapi.auth.AuthorizationException: Mutual authentication
>> failed
>> Expected target subject name="/CN=host/localhost"
>> Target returned subject name="/O=Grid/OU/CN=host/test2.igroup"
>> Exception in thread "main" Error during startup processing. Caused by .
>> Caused by AxisFault
>> faultCode: {
>> http://schemas.xmlsoap.org/soap/envelope/}Server.userException<http://schemas.xmlsoap.org/soap/envelope/%7DServer.userException>
>> faultSubcode:
>> faultString: org.globus.gsi.gssapi.auth.AuthorizationException: Mutual
>> authentication failed
>> Expected target subject name="/CN=host/localhost"
>> Target returned subject name="/O=Grid/OU/CN=host/test2.igroup"
>> faultActor:
>> faultNode:
>> faultDetail:
>> {
>>
>> http://xml.apache.org/axis/}stackTrace:org.globus.gsi.gssapi.auth.AuthorizationException<http://xml.apache.org/axis/%7DstackTrace:org.globus.gsi.gssapi.auth.AuthorizationException>
>> :
>> Mutual authentication failed
>> Expected target subject name="/CN=host/localhost"
>> Target returned subject name="/O=Grid/OU/CN=host/test2.igroup"
>> at
>>
>> org.globus.gsi.gssapi.auth.Authorization.generateAuthorizationException(Authorization.java:54)
>> at
>>
>> org.globus.gsi.gssapi.auth.HostAuthorization.authorize(HostAuthorization.java:97)
>> at org.globus.gsi.gssapi.net.GssSocket.startHandshake(GssSocket.java:156)
>> at org.globus.gsi.gssapi.net.GssSocket.getInputStream(GssSocket.java:177)
>> at
>> org.apache.commons.httpclient.HttpConnection.open(HttpConnection.java:744)
>> at
>>
>> org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(HttpMethodDirector.java:386)
>> at
>>
>> org.apache.commons.httpclient.HttpMethodDirector.executeMethod(HttpMethodDirector.java:170)
>> at
>>
>> org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:396)
>> at
>>
>> org.apache.axis.transport.http.CommonsHTTPSender.invoke(CommonsHTTPSender.java:224)
>> at
>>
>> org.apache.axis.strategies.InvocationStrategy.visit(InvocationStrategy.java:32)
>> at org.apache.axis.SimpleChain.doVisiting(SimpleChain.java:118)
>> at org.apache.axis.SimpleChain.invoke(SimpleChain.java:83)
>> at org.apache.axis.client.AxisClient.invokeTransport(AxisClient.java:150)
>> at org.apache.axis.client.AxisClient.invoke(AxisClient.java:289)
>> at org.apache.axis.client.Call.invokeEngine(Call.java:2838)
>> at org.apache.axis.client.Call.invoke(Call.java:2824)
>> at org.apache.axis.client.Call.invoke(Call.java:2501)
>> at org.apache.axis.client.Call.invoke(Call.java:2424)
>> at org.apache.axis.client.Call.invoke(Call.java:1835)
>> at
>>
>> org.globus.delegationService.DelegationFactoryPortTypeSOAPBindingStub.getResourceProperty(DelegationFactoryPortTypeSOAPBindingStub.java:1420)
>> at
>>
>> org.globus.delegation.DelegationUtil.getCertificateChainRP(DelegationUtil.java:613)
>> at
>>
>> org.globus.delegation.DelegationUtil.getCertificateChainRP(DelegationUtil.java:571)
>> at
>>
>> org.globus.transfer.reliable.client.ReliableFileTransferJob.getDelegationEpr(ReliableFileTransferJob.java:291)
>> at
>>
>> org.globus.transfer.reliable.client.ReliableFileTransferClient.parseArgs(ReliableFileTransferClient.java:141)
>> at
>>
>> org.globus.transfer.reliable.client.ReliableFileTransferClient.main(ReliableFileTransferClient.java:262)
>> at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
>> at
>>
>> sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
>> at
>>
>> sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
>> at java.lang.reflect.Method.invoke(Method.java:597)
>> at org.globus.bootstrap.BootstrapBase.launch(BootstrapBase.java:114)
>> at org.globus.bootstrap.Bootstrap.main(Bootstrap.java:41)
>>
>> {http://xml.apache.org/axis/}hostname:test2<http://xml.apache.org/axis/%7Dhostname:test2>
>>
>> Perhaps this error appears because of incorrect configuration of SimpleCA
>> after the GT4 installation. The situation is that I want to use RFT and
>> GT4
>> on my localhost only and I've not created special user "globus" (I have
>> only
>> root and one nonroot user in my system).
>> My OS is OpenSUSE 11.0
>> Could you help me in this?
>> Thanks in advance
>>
>>
>
--
Sergey Smolov
